Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File:                     djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier:          QBerdGn0b9iYCrym2kf/Ug/d/6OXyfR+U+euPfNIOUs=
Subject key identifier:   55:0D:E0:4F:B8:04:3A:3E:88:AF:98:20:D8:C3:83:33:61:D9:B8:FC
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer:       /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number:          0129
Signing time:             Thu 23 Jul 2026 07:23:43 +0000
Manifest this update:     Thu 23 Jul 2026 07:23:43 +0000
Manifest next update:     Thu 30 Jul 2026 07:23:43 +0000
Files and hashes:         1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: DjAtcOE2IdcStmkMBQ2lDmjlKiRHnvs6oif6MNqHNg8=)
                          2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
                          3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
        Validity
            Not Before: Jul 23 07:23:43 2026 GMT
            Not After : Jul 30 07:23:43 2026 GMT
        Subject: CN=6a61c17f-06d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:77:0e:6a:56:cc:a4:63:8a:49:c8:6b:e6:
                    7e:b8:ab:2c:a7:f3:2f:40:7a:a5:71:69:f1:8b:26:
                    a1:d8:73:26:76:0c:86:24:82:7f:1a:8b:f8:f1:49:
                    18:0a:23:41:50:52:e7:43:33:38:95:28:4b:a2:99:
                    f5:6c:ef:92:3e:a8:ae:93:34:57:2c:c6:8f:56:58:
                    14:3a:81:c9:4e:60:7a:f7:0d:22:83:56:16:37:04:
                    25:4f:0f:0a:44:9f:8a:12:e7:d0:ad:d5:a8:64:f4:
                    e6:63:96:b8:bf:53:e0:71:f8:63:a2:6e:56:95:46:
                    a7:81:4b:9e:04:67:0d:5d:d0:76:fa:21:e5:be:21:
                    d0:8a:fa:a5:52:12:bf:bb:64:67:4d:f2:09:bb:e4:
                    28:ce:01:cd:1b:04:0d:06:59:d1:40:7a:70:d9:75:
                    ee:22:bc:04:27:29:70:a0:3e:dd:67:98:c5:a2:69:
                    00:41:fe:6d:d0:5e:0b:9b:74:fe:cb:41:65:41:33:
                    db:07:4d:01:4a:a6:e0:2c:1a:68:6e:02:4b:ad:6d:
                    f9:24:d9:18:02:9e:64:39:55:6f:f5:25:c6:65:57:
                    fa:16:58:f4:51:ba:22:b3:ac:a9:7d:2f:21:26:ca:
                    d3:da:bd:a7:46:4f:1f:b6:cb:da:82:c2:2f:ba:ae:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:E0:4F:B8:04:3A:3E:88:AF:98:20:D8:C3:83:33:61:D9:B8:FC
            X509v3 Authority Key Identifier:
                keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:0d:e1:0c:49:3d:be:b3:f3:4a:12:44:6d:67:2f:0c:09:
         ca:54:3e:c8:8b:1a:92:2d:97:24:4e:06:d6:91:81:7c:17:0d:
         26:1d:32:23:a8:d2:61:97:e1:0e:3e:2c:2d:25:a7:56:b1:82:
         02:20:c7:ed:00:27:58:79:54:9a:c4:85:27:79:4d:16:8d:c4:
         2a:73:56:f7:c3:5b:f5:f6:42:91:30:c4:40:af:45:18:61:8e:
         63:8d:48:21:2b:bb:3e:95:54:2f:8a:b0:b5:3f:23:28:85:7a:
         2d:b7:9d:6c:f1:82:01:c9:92:ec:a0:2a:51:45:49:2a:de:4f:
         ca:f0:16:78:cd:fd:eb:6f:84:d0:b0:cd:7c:92:40:62:38:8b:
         72:84:10:c2:fc:9a:26:74:97:cf:c4:44:ea:d1:74:6c:d7:03:
         85:56:4c:da:92:b0:f8:06:47:cf:e3:30:27:73:18:8b:e8:dc:
         c2:50:fe:3e:df:00:8a:fb:6e:42:cb:9b:6d:c9:83:e8:c8:5c:
         ca:56:11:7e:d8:85:0e:f4:09:89:bb:15:5c:77:97:38:bb:94:
         ad:87:49:fe:1f:68:d4:f4:27:cc:2c:ef:25:24:e7:6f:c3:ec:
         ef:79:2c:e2:61:a1:fe:31:60:02:f4:a2:c8:97:06:f4:71:38:
         a7:28:74:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjIzRDkxMTAvBgNVBAUTKDc2MzRBRDg2NjU2RUZFNkM0NUU0RUY5OThGOTRCNjk3
QUMzOUJFRjEwHhcNMjYwNzIzMDcyMzQzWhcNMjYwNzMwMDcyMzQzWjAYMRYwFAYD
VQQDEw02YTYxYzE3Zi0wNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/d3DmpWzKRjiknIa+Z+uKssp/MvQHqlcWnxiyah2HMmdgyGJIJ/Gov48UkY
CiNBUFLnQzM4lShLopn1bO+SPqiukzRXLMaPVlgUOoHJTmB69w0ig1YWNwQlTw8K
RJ+KEufQrdWoZPTmY5a4v1Pgcfhjom5WlUangUueBGcNXdB2+iHlviHQivqlUhK/
u2RnTfIJu+QozgHNGwQNBlnRQHpw2XXuIrwEJylwoD7dZ5jFomkAQf5t0F4Lm3T+
y0FlQTPbB00BSqbgLBpobgJLrW35JNkYAp5kOVVv9SXGZVf6Flj0Ubois6ypfS8h
JsrT2r2nRk8ftsvagsIvuq60JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUN4E+4
BDo+iK+YINjDgzNh2bj8MB8GA1UdIwQYMBaAFHY0rYZlbv5sReTvmY+UtpesOb7x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNEOS84MzY4NkFDQ0M5
RDExMUVGOTc1QkRDNEJDNEY5QUUwMi9kalN0aG1WdV9teEY1Ty1aajVTMmw2dzV2
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjNEOS84MzY4NkFDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi9kalN0aG1WdV9t
eEY1Ty1aajVTMmw2dzV2dkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADzMN4QxJPb6z80oSRG1nLwwJylQ+yIsaki2XJE4G1pGBfBcNJh0yI6jSYZfh
Dj4sLSWnVrGCAiDH7QAnWHlUmsSFJ3lNFo3EKnNW98Nb9fZCkTDEQK9FGGGOY41I
ISu7PpVUL4qwtT8jKIV6LbedbPGCAcmS7KAqUUVJKt5PyvAWeM3962+E0LDNfJJA
YjiLcoQQwvyaJnSXz8RE6tF0bNcDhVZM2pKw+AZHz+MwJ3MYi+jcwlD+Pt8Aivtu
QsubbcmD6MhcylYRftiFDvQJibsVXHeXOLuUrYdJ/h9o1PQnzCzvJSTnb8Ps73ks
4mGh/jFgAvSiyJcG9HE4pyh0zA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:43 2026 by rpki-client